29
Assess the Risk - Impact
• Very high — Multiple severe or catastrophic effects
• High — Severe or catastrophic:
– severe degradation of organization mission capability, loss of ability to perform a
core function, major damage to assets, major financial loss, significant harm to
individuals involving death or threat to life
• Moderate — Serious adverse effect:
– significant degradation in mission capability, without loss of ability to perform
core functions; significant damage to assets; significant financial loss; significant
but non-life-threatening harm to individuals
• Low — Limited adverse effect:
– degradation in mission capability such that the organization can perform core
functions, but the effectiveness of those functions is reduced; minor damage;
financial loss; minor harm to individuals
• Very low — Negligible